A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsmbclient-develUpgrade samba-develUpgrade libwbclient-devel | May 4, 2022 | May 5, 2021 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | May 5, 2021 |
| Amazon Linux Ami 2 | — | Upgrade samba-krb5-printingUpgrade samba-client-libsUpgrade ctdb-testsUpgrade samba-commonUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-libsUpgrade samba-pythonUpgrade samba-test-libsUpgrade samba-testUpgrade samba-winbindUpgrade samba-python-testUpgrade libsmbclientUpgrade samba-pidlUpgrade samba-debuginfoUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-common-libsUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade ctdbUpgrade samba-dcUpgrade samba-winbind-modulesUpgrade samba-vfs-glusterfs | Jul 2, 2021 | May 5, 2021 |
| Amazon_linux | — | Upgrade samba | Feb 19, 2022 | Apr 29, 2021 |
| Centos_linux | — | Upgrade samba-common-libs-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-clientUpgrade samba-common-tools-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-testUpgrade samba-debugsourceUpgrade libwbclient-develUpgrade samba-dcUpgrade samba-test-libsUpgrade samba-client-libsUpgrade samba-pidlUpgrade samba-python-testUpgrade samba-winbind-krb5-locator-debuginfoUpgrade ctdb-tests-debuginfoUpgrade ctdb-testsUpgrade libwbclient-debuginfoUpgrade sambaUpgrade samba-winbind-modules-debuginfoUpgrade samba-test-libs-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade libsmbclientUpgrade libwbclientUpgrade samba-client-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-winexeUpgrade samba-commonUpgrade samba-winbind-debuginfoUpgrade samba-client-debuginfoUpgrade libsmbclient-develUpgrade samba-debuginfoUpgrade python3-sambaUpgrade ctdbUpgrade samba-libs-debuginfoUpgrade samba-common-toolsUpgrade samba-test-debuginfoUpgrade samba-develUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printing-debuginfoUpgrade samba-pythonUpgrade samba-vfs-glusterfsUpgrade samba-winbind-modulesUpgrade ctdb-debuginfoUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-dc-libs | Jun 9, 2021 | May 5, 2021 |
| Debian | — | Upgrade samba | May 31, 2021 | May 5, 2021 |
| Freebsd | — | Upgrade samba413Upgrade samba414Upgrade samba412 | Nov 4, 2022 | May 1, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 28, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libwbclientUpgrade sambaUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common | Sep 16, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-libsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade libsmbclientUpgrade samba-commonUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba | Oct 26, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-libsUpgrade sambaUpgrade samba-common-toolsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-commonUpgrade samba-winbind | Sep 7, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-commonUpgrade samba-common-toolsUpgrade python3-sambaUpgrade samba-libsUpgrade python2-sambaUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade ctdbUpgrade libwbclientUpgrade samba-testUpgrade samba-winbindUpgrade sambaUpgrade samba-krb5-printingUpgrade libsmbclientUpgrade samba-common-libsUpgrade ctdb-testsUpgrade python2-samba-testUpgrade samba-winbind-clientsUpgrade samba-pidlUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-winbind-modules | Aug 10, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmbclientUpgrade samba-libsUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade libwbclientUpgrade samba-common-tools | Aug 10, 2021 | May 5, 2021 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | May 5, 2021 |
| Oracle_linux | — | Upgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba-python-testUpgrade ctdb-testsUpgrade samba-develUpgrade samba-dcUpgrade samba-pidlUpgrade ctdbUpgrade samba-pythonUpgrade libsmbclientUpgrade sambaUpgrade samba-testUpgrade libwbclient-develUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-winexeUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade python3-samba-testUpgrade python3-samba | Jun 10, 2021 | Apr 29, 2021 |
| Qnap Qts | — | Upgrade QNAP QTS to the latest version | Aug 4, 2025 | Jun 16, 2021 |
| Redhat_linux | — | Upgrade samba-debugsourceUpgrade ctdb-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-dc-libsUpgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade libwbclient-develUpgrade libwbclient-debuginfoUpgrade samba-winexeUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-dcUpgrade python3-samba-testUpgrade samba-python-testUpgrade samba-pythonUpgrade ctdb-tests-debuginfoUpgrade ctdb-testsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-client-libs-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-pidlUpgrade samba-libsUpgrade sambaUpgrade python3-sambaNo solution existsUpgrade samba-common-tools-debuginfoUpgrade libsmbclient-develUpgrade libsmbclient-debuginfoUpgrade samba-client-libsUpgrade samba-winexe-debuginfoUpgrade libwbclientUpgrade ctdbUpgrade samba-winbind-clients-debuginfoUpgrade samba-debuginfoUpgrade samba-commonUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-debuginfoUpgrade samba-krb5-printingUpgrade samba-winbind-modules-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-test-libsUpgrade samba-testUpgrade samba-test-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-devel | Jun 9, 2021 | May 5, 2021 |
| Rocky_linux | — | Upgrade libsmbclient-develUpgrade ctdb-testsUpgrade libsmbclient-debuginfoUpgrade samba-client-libsUpgrade samba-debuginfoUpgrade samba-testUpgrade ctdb-debuginfoUpgrade samba-krb5-printingUpgrade samba-winbind-modules-debuginfoUpgrade samba-libsUpgrade samba-winbind-clients-debuginfoUpgrade python3-sambaUpgrade libwbclient-debuginfoUpgrade libwbclientUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbindUpgrade sambaUpgrade ctdb-tests-debuginfoUpgrade libwbclient-develUpgrade samba-common-libs-debuginfoUpgrade samba-test-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-test-libsUpgrade samba-libs-debuginfoUpgrade samba-winbind-modulesUpgrade samba-debugsourceUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-client-debuginfoUpgrade samba-winexeUpgrade samba-test-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade ctdbUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libsmbclientUpgrade samba-winbind-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-develUpgrade python3-samba-debuginfo | May 5, 2022 | May 5, 2021 |
| Samba | — | Upgrade to Samba 4.12.15 or later.Upgrade to Samba 4.13.8 or later.Upgrade to Samba 4.14.4 or later. | Jun 11, 2021 | May 5, 2021 |
| Suse | — | Upgrade samba-ad-dcUpgrade libdcerpc-binding0Upgrade samba-winbind-libsUpgrade libwbclient-develUpgrade samba-pythonUpgrade libsamba-passdb0Upgrade samba-32bitUpgrade libndr-nbt0Upgrade libnetapi0Upgrade samba-core-develUpgrade samba-cephUpgrade libwbclient0-32bitUpgrade libndr-krb5pac0Upgrade libndr-nbt0-32bitUpgrade samba-docUpgrade samba-winbindUpgrade libsamba-policy0Upgrade ldapsmbUpgrade libtevent-util0-32bitUpgrade libdcerpc-atsvc0Upgrade libsmbldap-develUpgrade libsamdb0Upgrade libsamba-passdb0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libtalloc2-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-errors0Upgrade samba-winbind-libs-32bitUpgrade samba-libs-python3-32bitUpgrade samba-python3Upgrade samba-ldb-ldapUpgrade libdcerpc-samr0-32bitUpgrade libsmbconf-develUpgrade libndr-krb5pac-develUpgrade samba-gpupdateUpgrade libdcerpc-develUpgrade samba-dsdb-modulesUpgrade libsamba-credentials-develUpgrade libnetapi-devel-32bitUpgrade libndr-develUpgrade ctdb-pcp-pmdaUpgrade libndr-nbt-develUpgrade libdcerpc0Upgrade libtdb1-32bitUpgrade libtalloc2Upgrade libtevent-util0Upgrade samba-libs-python3Upgrade libsmbldap0Upgrade libndr1-32bitUpgrade samba-ad-dc-libsUpgrade libndr-standard0-32bitUpgrade sambaUpgrade samba-client-libsUpgrade samba-winbind-32bitUpgrade ctdb-testsUpgrade libndr-standard0Upgrade samba-clientUpgrade libwbclient0Upgrade libtdb1Upgrade libsamba-policy-python3-develUpgrade libsamba-credentials0-32bitUpgrade samba-libs-32bitUpgrade libsamba-policy-develUpgrade samba-libsUpgrade samba-libs-pythonUpgrade libtevent0Upgrade samba-krb-printingUpgrade libsamba-policy0-python3-32bitUpgrade libnetapi-develUpgrade libndr1Upgrade samba-client-32bitUpgrade libsamba-passdb-develUpgrade samba-ad-dc-32bitUpgrade libnetapi0-32bitUpgrade libsamba-policy0-python3Upgrade libsmbconf0Upgrade libsamba-util0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-util-develUpgrade libsamba-hostconfig0Upgrade libtevent0-32bitUpgrade libtevent-util-develUpgrade libsamba-hostconfig-develUpgrade libsamba-errors0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsmbldap2Upgrade libsmbldap0-32bitUpgrade samba-develUpgrade libndr0Upgrade libdcerpc0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-credentials0Upgrade libndr-standard-develUpgrade libdcerpc-samr-develUpgrade libsamba-util0Upgrade libsmbclient0Upgrade ctdbUpgrade libldb1Upgrade libsamba-errors-develUpgrade libsamdb-develUpgrade libdcerpc-samr0Upgrade libsmbconf0-32bitUpgrade libndr0-32bitUpgrade libsmbclient-develUpgrade samba-testUpgrade libsmbclient0-32bitUpgrade samba-client-libs-32bit | Apr 30, 2021 | Apr 29, 2021 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Apr 30, 2021 | Apr 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub